Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/9zAuj7_g4x6jfKZefX3RSwASO_4.roa
File: 9zAuj7_g4x6jfKZefX3RSwASO_4.roa (raw, json)
Hash identifier: 3GDFkJR4OaA5LyzuoG3WUlRL8SuiTkx9YLvHXKBhMKA=
Subject key identifier: F7:30:2E:8F:BF:E0:E3:1E:A3:7C:A6:5E:7D:7D:D1:4B:00:12:3B:FE
Certificate issuer: /CN=390b67368c91b85e84888c5ed2e824d1390810bb
Certificate serial: 046E0B71
Authority key identifier: 39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/9zAuj7_g4x6jfKZefX3RSwASO_4.roa
Signing time: Fri 07 Jan 2022 00:45:37 +0000
ROA not before: Fri 07 Jan 2022 00:45:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400040
IP address blocks: 193.109.192.0/24 maxlen: 24
85.237.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74320753 (0x46e0b71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390b67368c91b85e84888c5ed2e824d1390810bb
Validity
Not Before: Jan 7 00:45:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f7302e8fbfe0e31ea37ca65e7d7dd14b00123bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:17:e2:9a:a1:28:5b:93:bf:a8:90:90:bb:b3:
3c:46:e9:9c:46:db:3d:81:bb:19:6d:fa:24:1a:31:
10:cb:50:f1:9e:63:e8:03:a0:d0:55:c6:d2:fc:5d:
8d:ba:37:de:8f:4c:1a:33:5c:00:32:86:63:36:89:
85:88:f8:4d:8c:a1:84:6a:13:cd:56:d4:ea:e7:09:
1e:84:39:2b:41:aa:1f:8d:05:52:c2:ec:48:40:fc:
8a:46:7b:47:08:a1:0c:18:77:d4:2f:53:a4:8e:ed:
59:45:41:42:b2:fa:63:62:43:29:43:4a:c3:63:ca:
f3:6b:dd:b5:06:e7:d5:f4:40:ef:57:f3:43:ae:bc:
2d:fc:de:b7:6d:18:41:76:cf:e7:49:d4:98:6c:29:
06:9c:1c:0a:7a:0f:51:e7:56:8e:3a:9c:a1:9b:00:
36:c6:a7:cc:f9:f5:4c:df:f5:9f:5f:2c:73:e7:40:
7e:56:03:25:89:82:7f:56:0a:17:b4:22:5f:d5:83:
c6:02:55:98:8f:29:96:8b:ad:e0:be:b8:b4:d2:fe:
65:c1:06:a8:27:8c:c7:e4:65:54:54:ac:7d:e7:19:
8b:25:48:ed:b0:19:b4:cd:4f:1a:22:93:47:74:2e:
b9:cc:54:86:4e:80:77:a5:b1:51:db:c4:29:eb:ba:
e1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:30:2E:8F:BF:E0:E3:1E:A3:7C:A6:5E:7D:7D:D1:4B:00:12:3B:FE
X509v3 Authority Key Identifier:
keyid:39:0B:67:36:8C:91:B8:5E:84:88:8C:5E:D2:E8:24:D1:39:08:10:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQtnNoyRuF6EiIxe0ugk0TkIELs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/9zAuj7_g4x6jfKZefX3RSwASO_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/16cce4-e981-4be5-b9f6-5c9d62629c86/1/OQtnNoyRuF6EiIxe0ugk0TkIELs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.197.0/24
193.109.192.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:9f:18:2d:81:40:7f:82:f0:42:35:1e:9f:3f:10:37:cb:f9:
71:43:e6:a9:9e:ef:53:30:81:4c:c0:2b:41:a8:73:ce:d4:a9:
58:46:c2:24:10:83:c8:62:3c:e3:ca:46:3f:8b:52:06:17:a7:
1f:f1:d0:16:cf:a4:b7:89:8e:2c:e0:44:d2:46:c9:f6:e6:d5:
4b:ed:81:5a:79:55:01:50:ca:df:94:ad:db:2c:b3:4e:94:1d:
18:24:38:97:06:c4:f6:18:08:44:8d:e7:de:0b:2b:f7:ff:79:
c4:a2:9a:d0:93:12:52:1b:5a:bf:da:43:d5:b8:20:8e:75:90:
59:54:1f:54:c5:61:24:a5:c6:c7:20:38:86:53:be:93:e9:04:
80:0a:f2:27:ab:40:f5:3f:49:31:e2:3d:4b:d4:4d:0a:f5:e2:
ba:1d:91:4a:65:40:10:0f:7d:90:dd:ee:c0:26:b4:1e:6d:c6:
f6:ed:02:37:a6:2e:8c:7c:61:e9:c2:f9:f7:a1:c1:2e:c3:c2:
f0:93:d0:b5:7a:3b:08:b4:89:27:14:0f:44:96:b0:a8:63:91:
2b:78:68:c8:69:a6:43:e2:18:5e:24:1b:f3:08:cf:8c:cf:e4:
c6:c2:48:9d:f8:bc:d0:cf:55:d4:65:12:5c:bb:c6:f3:f9:3a:
47:e0:65:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:24 2023 by rpki-client on console-fra.rpki-client.org